Australian Cyber Aware - As It Was 2606 - June 2026. Aggregated listing of Australian and New Zealand cybersecurity, privacy, and AI risks developments identified during June 2026. It includes cybersecurity incidents, regulatory updates, news stories, audit findings, and broader industry developments relevant to business and government audiences.
Western Australian police have begun trialling live facial recognition cameras that match faces in crowds to police databases in real time, raising privacy and human rights concerns. New South Wales [...]
The South Australian health system is accused of having a sticky beak culture with Tony Modra becoming the latest high-profile identity to have his privacy breached. 7NEWS can reveal the [...]
Chat GPT maker, Open AI says one of its most advanced AI models, an autonomous agent, went rogue and hacked into multi-billion-dollar tech startup Hugging Face during a laboratory test. [...]
Highly active cyber extortion group claims hack of Australian HBS Group, data to be published within seven days. • Mon, 27 Jul 2026 • … [...]
The maker of unmanned guidance hardware supplied to Ukraine says some systems have been taken offline, and the incident is under investigation. • Mon, … [...]
The Deadlock ransomware gang is claiming to have stolen company data from an Aussie company with projects throughout the African nation of Burkina … [...]
In brief As many as 4.8 million Origin Energy customers could be affected by a cyber attack that exposed personal data. • Experts have warned the fallout … [...]
Origin Energy has confirmed that unauthorised access to customer information has occurred, marking what is believed to be the largest publicly known … [...]
What should I do? It should not take the emergence of frontier AI models to motivate a revisit of your organisation’s current cyber posture. It’s … [...]
Insider security risks: a frequently overlooked threat Cyber security and privacy controls are usually thought of as ways to protect from external … [...]
The AICD, in partnership with the Human Technology Institute (HTI) at the University of Technology Sydney, has updated its key artificial … [...]
Energy company Origin has confirmed there has been unauthorised access to and disclosure of some customers' data. In a statement released via the ASX, … [...]
Origin Energy has confirmed the personal information of some of its customers has been stolen in a suspected cyber hack. The energy giant said in a … [...]
The Joint Policing Cybercrime Coordination Centre has warned that criminals are using artificial intelligence to create highly convincing investment … [...]
Origin Energy, Australia's biggest power provider, is investigating a suspected cyber attack affecting up to 5 million Australians. A hacker calling himself John Doe claims to have stolen personal data [...]
Origin Energy says an investigation has been launched into a potential hacking incident with reports two million customers could have been affected. The company has 4.8 million customers. The nation's [...]
One of Australia's largest energy companies, Origin Energy, says it is investigating a security breach that "may have" affected customer data. "Origin … [...]
Origin Energy is investigating a potential cyber hack that may have compromised the data of some customers. In a statement, the major energy provider … [...]
Published 27-Jul-26 AU WA
Exclusive: Australian mining firm West African Resources suffers alleged data breach
The Deadlock ransomware group claims to have hacked the Western Australian-based company West African Resources (WAF) in a leak post dated 26 July.
Confirmed 27-Jul-26 AU VIC
Exclusive: Aussie unmanned systems firm CubePilot boss warns of ‘security incident’
CubePilot, an Australian maker of hardware and embedded software for the civilian unmanned systems industry has warned its customers that some of its systems are offline while they are investigating a “security incident”.
Confirmed 24-Jul-26 AU
SA Health staff investigated after AFL icon records breach | 7NEWS
The South Australian Health system is accused of having a sticky beak culture with Tony Modra becoming the latest high-profile identity to have his privacy breached.
Claim 24-Jul-26 AU QLD
[Unconfirmed] Ransomware Group m3rx Hits AusProof
The ransomware group m3rx has claimed to have exfiltrated approximately 460 GB of corporate data from AusProof, which includes around 373,495 files.
Claim 23-Jul-26 AU VIC
Exclusive: Victorian heritage and restoration firm listed by The Gentlemen ransomware group
A highly active cyber extortion group claims hack of Australian HBS Group, and data is set to be published within seven days.
Confirmed 23-Jul-26 AU VIC
Exclusive: Aussie property management firm confirms customer data safe following hack claims
Threat actor Kairos, has claimed a cyber attack on a Melbourne-based property management firm LR Reed, having allegedly stolen data from the company.
Confirmed 22-Jul-26 AU NSW
Origin Energy investigating 'potential' customer data breach
One of Australia's largest energy companies, Origin Energy, says it is investigating a security breach that "may have" affected customer data.
Claim 21-Jul-26 AU VIC
[Unconfirm] Settra Ransomware Gang Claims Data Theft at Australian Collectables Retailer Downies
Ransomware group Settra publicly claimed Downies Collectables as a victim, alleging exfiltration of 550 GB of internal business data, published sample data, and a published ransom deadline.
Confirmed 21-Jul-26 AU QLD
GO2 Health medical clinic in Brisbane waited almost three months to alert patients it was hacked
GO2 Health, a medical clinic in Everton Park, Brisbane, was targeted by hackers in April 2026 through a phishing attack that accessed the clinic’s main email inbox.
Published 21-Jul-26 AU NSW
Exclusive: NSW accounting and advisory firm allegedly hit by SafePay ransomware
AC Small Maxwell & Co was listed on the dark web leak site of the SafePay ransomware gang, which set the date for the release of the allegedly stolen data to just over two days from the time of writing.
Confirmed 15-Jul-26 AU SA
Medical records and personal details stolen in GP network cyber attack
Partnered Health, a network of GP clinics across the country has been hit in a cyber attack, with sensitive medical records and personal information stolen.. Company statement - https://partneredhealth.com.au/partnered-health-recent-cyber-incident/
Confirmed 14-Jul-26 AU ACT
Lifeline Australia confirms staff data compromised following hacking claims
Aussie suicide-prevention charity Lifeline has confirmed it was the victim of a data breach by threat actor 2019, after details of the incident were posted to a popular underground hacking forum.
Published 13-Jul-26 AU NSW
Exclusive: Prolific hacker 2019 selling alleged Hot Toner Australia customer data online
The threat actor, who calls themselves 2019, posted details of data they allege was stolen from Hot Toner Australia, a company that specialises in printer consumables.
Confirmed 10-Jul-26 AU QLD
Hacked! Royal Foods confirms cyber incident following The Gentlemen ransomware claims
"Royal Foods is investigating a recent incident in which an unauthorised third party accessed elements of our internal IT environment associated with administrative functions," the spokesperson said.
The Gentlemen shared no other details regarding the data allegedly breached, nor its volume.
Published 11-Jul-26 AU WA
Ransomware group Dragonforce hits Western Australian company Access Group Hire
Dragonforce have claimed to have breached equipment hire firm Access Hire Australia. Publishing a limited set of data showing invoices, customer credit checks and customer hire list.
Confirmed 08-Jul-26 AU
Telstra mobile network hit by significant outage
Telstra’s mobile network is experiencing a large-scale outage impacting voice and data services on Wednesday, with users finding their phones in SOS mode. Company Updates - Our recent mobile network outage has been resolved: here’s what happened
Claim 02-Jul-26 AU NSW
Unconfirmed: Qilin Ransomware Strikes Pennant Hills Golf Club
A newly surfaced victim listing naming Pennant Hills Golf Club shows how ransomware operators turn public exposure into pressure, even when the underlying compromise has not been independently established.
If you believe any information in this post is inaccurate or incomplete, please contact us so we can review the matter. Parties with additional relevant information relating to the incident are also invited to get in touch.
Australian Insurer Ransomware Attack, 07 January 2026 Queensland-based rental car insurer Prosura...
Australian Medical Ransomware Attack, 06 Jun 2025: Victorian based Ascot Vale Health Group targeted by Global ransomware group. Global ransomware group has so far not listed how much data it has allegedly stolen or what kind of data may have been compromised.
Australian Racing Industry Ransomware Attack, 05 Jun 2025: Victorian based RISE Racing confirms Sarcoma ransomware attack. Reports indicate that 1.6GB of sensitive data was stolen, including: Banking details, financial records, participant personal information and operational data related to the racing industry.
Australian Accounting Firm Ransomware Attack, 16 May 2025: Victorian MKA Accountants confirms Qilin ransomware attack. Qilin published 12 documents as part of its leak post, including internal correspondence, financial statements, and insurance information
Australian Cyber Incident – Court Data Breach, 26 March 2025: NSW court website involved in major data breach, 9,000 documents downloaded. Man charged in connection with court document data breach.
Incident – Law Firm Ransomware Attack, 13 March 2025: Prominent Sydney law firm Brydens Lawyers reveals a serious cyber incident in the wake of a February intrusion into its network. More than 600 gigabytes of data – including case, client, and staff data – was stolen in the incident.
NZ Incident – Ransomware Attack, 28 February 2025: DragonForce Ransomware Targets Kiwi Car Dealership Tristram European. The attackers claim to have stolen over 30 gigabytes of sensitive data, including customer information and financial records.
Updated Incident – Medical Data Breach, 19 February 2025: Australian IVF provider Genea in cyber incident. Genea patients frustrated by lack of communication amid data breach.
Incident – University Ransomware Attack, 16 February 2025: Australian National University investigating alleged cyber attack by FSociety ransomware group. No ransom amount was given; however, society is threatening to publish the data within seven days.
NZ Incident – Medical Ransomware Attack, 13 February 2025: KillSec claims ransomware attack on New Zealand based Obex Medical. While the exact details of the breach remain unclear, this latest incident highlights the persistent threat of ransomware groups, particularly those focused on industries like healthcare.
Quotes and Memes: "Complexity creates confusion, simplicity focus." - Edward de Bono
